Your information, handled carefully and clearly

Mortgage Bridge Ltd is the data controller for the personal information covered by this notice. This means we determine why and how that information is used.

Mortgage Bridge acts as a mortgage introducer. We do not provide regulated mortgage or insurance advice. Where appropriate, we may introduce you to an FCA-regulated mortgage, protection or insurance adviser.

You can contact us about this notice or the use of your personal information at hello@mortgagebridge.co.uk or on 0333 014 0230.

Our ICO registration number is ZB408227.

Personal information is information that identifies you directly or indirectly. Depending on how you interact with us, we may collect:

• Your name, date of birth, telephone number, email address and residential address.
• Identity, residency, nationality or visa-related information where relevant to your enquiry.
• Employment, occupation, income, expenditure and existing financial-commitment information.
• Information about your deposit, property plans, existing mortgage and proposed borrowing.
• High-level information about your credit history, including missed payments, defaults, CCJs, arrangements or insolvency events where relevant.
• Information about the mortgage, protection or insurance support you are seeking.
• Copies or details of communications you exchange with us.
• Website and technical information such as IP address, device, browser, referral source and website interaction information, subject to applicable cookie choices.
• Records of consent, preferences, introductions, enquiries and complaints.

We aim to collect only information that is relevant and proportionate to the reason for which it is required.

We use personal information only where we have an appropriate purpose and lawful basis.

Taking steps at your request and performing a contract

We may use information to respond to your enquiry, provide the service you have requested and take steps connected with a possible adviser introduction.

Legitimate interests

We may use information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights. These interests may include:

• Responding to and managing enquiries.
• Operating, securing and improving our website, CRM and business systems.
• Maintaining records of introductions and communications.
• Preventing misuse, detecting fraud and protecting our business.
• Establishing, exercising or defending legal claims.

Legal obligations

We may use information where necessary to comply with data protection, fraud-prevention, tax, accounting, court, regulatory or other legal obligations.

Consent

We may rely on consent for particular marketing activities, optional cookies, the handling of certain sensitive information or another purpose explained when consent is requested. You may withdraw consent at any time, although this does not affect processing carried out before withdrawal.

Information about health is classed as special-category information and receives additional legal protection. Information about criminal convictions and offences is also subject to additional rules.

Mortgage Bridge does not routinely need detailed health or criminal-offence information to make a mortgage adviser introduction. However, you may provide limited information where it is relevant to a protection or insurance enquiry or to explain your circumstances.

Where we need to process special-category information, we will identify an appropriate Article 6 lawful basis and Article 9 condition. This may include your explicit consent where appropriate. Criminal-offence information will only be processed where permitted by data protection law and an applicable condition is satisfied.

Wherever practicable, detailed medical or underwriting information should be provided directly to the regulated adviser or insurer responsible for assessing it.

We may collect information:

• Directly from you through online forms, telephone calls, emails, messages or other communications.
• When you use a calculator, checker or other digital tool and choose to submit information.
• Through website technologies, including cookies and similar technologies where applicable.
• From a joint applicant or another person acting with your authority.
• From an adviser, professional service provider or business partner where you have authorised the disclosure or it is otherwise lawful.
• From identity, fraud-prevention, credit-reference or verification services where these are used lawfully and you have been informed.
• From publicly available sources where appropriate and lawful.

If someone provides us with information about another person, they should ensure they have authority to do so and, where appropriate, make this notice available to that person.

Depending on the nature and progress of your enquiry, we may share relevant information with:

• FCA-regulated mortgage, protection or insurance advisers to whom we introduce you.
• Mortgage lenders and insurance providers, usually through the regulated adviser handling your case.
• Conveyancers, surveyors or other professional service providers where you request or authorise this.
• Identity-verification, fraud-prevention or credit-reference providers where appropriately used.
• CRM, hosting, communications, email, analytics, administration, cybersecurity and technical-support providers.
• Accountants, auditors, legal advisers, insurers and other professional advisers supporting our business.
• Regulators, courts, law-enforcement bodies, government agencies or other authorities where disclosure is required or permitted by law.
• A purchaser, investor or successor if our business or assets are reorganised, sold or transferred, subject to appropriate safeguards.

AI and software-development providers

We may use AI and software-development service providers, including Anthropic and OpenAI, to support the development, testing, troubleshooting and quality assurance of our CRM and related business systems.

We seek to avoid submitting identifiable customer information to these services and apply data-minimisation, access-control and confidentiality measures. However, where authorised developers need access to a live environment, limited personal information may be incidentally processed in connection with support, testing or troubleshooting.

Where a provider processes personal information on our behalf, we require appropriate contractual, confidentiality, security and data protection safeguards.

We do not sell your personal information.

Marketing communications

We may send electronic marketing where you have consented or where another lawful route, such as the applicable existing-customer “soft opt-in”, is available. We will provide a simple way to opt out.

You can ask us to stop direct marketing at any time by using the unsubscribe option in a message or contacting us directly.

Cookies and website analytics

Our website may use necessary cookies to provide core functionality. With your consent, we may also use analytics, advertising or other optional technologies to understand website use and improve our services.

You can manage optional cookie choices through the cookie controls made available on our website and through your browser settings.

We may use digital tools to organise enquiry information or compare it with broad criteria. For example, a tool may indicate that an enquiry could require specialist adviser support.

These tools provide preliminary or administrative assistance. They do not provide regulated mortgage advice, guarantee eligibility or make a final lender or insurer decision.

Mortgage Bridge does not intend to make decisions about you based solely on automated processing that produce legal or similarly significant effects. Any lender, insurer or regulated adviser may operate separate assessment systems covered by their own privacy information.

You may contact us if you want an explanation or human review of how a Mortgage Bridge pre-screening result has been used.

Some technology and service providers may process personal information in, or permit access from, countries outside the UK. This may include cloud, communications, analytics, technical-support and software-development providers.

It may also include AI and software-development service providers such as Anthropic and OpenAI when their services are used for authorised development, testing, troubleshooting or quality-assurance work.

Where a restricted transfer occurs, we use a transfer mechanism permitted by UK data protection law. Depending on the destination and circumstances, this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the EU Standard Contractual Clauses; or
• another applicable safeguard or exception permitted by law.

Where required, we assess the protection available in the destination country and implement supplementary contractual, technical or organisational safeguards.

You may contact us for more information about safeguards relevant to your personal information.

Security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, misuse or unauthorised access.

Access is limited to people and providers who need the information for an authorised purpose and who are subject to suitable confidentiality and security obligations.

Accuracy

We take reasonable steps to keep information accurate and up to date. Please tell us if your contact details or circumstances change or if you believe information we hold is incorrect.

Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, accounting, fraud-prevention, complaint-handling and legal-claim requirements.

Retention periods vary by record type. Records connected with a completed adviser introduction or business transaction may generally be retained for up to six years after the end of the relevant relationship or activity. Some information may be kept for a shorter period, while limited records may need to be kept longer where required by law, a regulator, an unresolved complaint or a legal claim.

When information is no longer required, we will delete, anonymise or securely dispose of it in accordance with our retention arrangements.

Depending on the circumstances and lawful basis, you may have the right to:

• Ask for confirmation that we use your information and obtain a copy of it.
• Ask us to correct inaccurate information or complete incomplete information.
• Ask us to delete information where the right to erasure applies.
• Ask us to restrict the use of information in certain circumstances.
• Object to processing based on legitimate interests in certain circumstances.
• Object at any time to the use of information for direct marketing.
• Receive certain information in a structured, commonly used and machine-readable format where data portability applies.
• Withdraw consent where processing is based on consent.
• Raise concerns about automated processing and request appropriate human involvement where applicable.

These rights are not all absolute. We may need to verify your identity and may ask for information to help us locate the relevant records. We will explain if a right does not apply or if a lawful exemption affects our response.

We normally respond to valid rights requests within one month, although the period may be extended where permitted for a complex request. We will tell you if an extension is required.

To exercise a right or raise a privacy concern, contact:

• Email: hello@mortgagebridge.co.uk
• Telephone: 0333 014 0230
• ICO registration number: ZB408227

If you are unhappy with our response, you have the right to complain to the Information Commissioner’s Office. You can find complaint information at ico.org.uk/make-a-complaint/ .

We would appreciate the opportunity to investigate and try to resolve your concern before you approach the ICO.

Changes to this notice

We may update this notice when our services, suppliers, technology or legal obligations change. The date displayed at the top of the page shows when the notice was most recently updated.